Description
A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/application_status.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-06-01
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the application_status.php file of CodeAstro Online Job Portal 1.0. A crafted manipulation of the ID argument allows arbitrary SQL code to be injected, giving an attacker the ability to read, alter, or delete data from the database. This flaw cannot directly execute arbitrary code, but it can compromise the confidentiality, integrity, and availability of the underlying data.

Affected Systems

Only the CodeAstro Online Job Portal version 1.0 is affected; no other versions or components are listed as vulnerable.

Risk and Exploitability

The CVSS score of 6.9 indicates a moderate severity, and the EPSS score is not available. The vulnerability is not yet listed in the CISA KEV catalog. Because the flaw can be triggered remotely through the web interface, and a published exploit exists, the likelihood of exploitation is considered realistic for attackers with web access.

Generated by OpenCVE AI on June 1, 2026 at 16:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the CodeAstro Online Job Portal application_status.php module to properly sanitize the ID input and use prepared statements or parameterized queries.
  • Enforce numeric validation and length checks on the ID parameter to reject malformed input.
  • Monitor web application logs for unexpected or suspicious ID values and investigate any anomalous activity.

Generated by OpenCVE AI on June 1, 2026 at 16:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 01 Jun 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 01 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/application_status.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Title CodeAstro Online Job Portal application_status.php sql injection
First Time appeared Codeastro
Codeastro online Job Portal
Weaknesses CWE-74
CWE-89
CPEs cpe:2.3:a:codeastro:online_job_portal:*:*:*:*:*:*:*:*
Vendors & Products Codeastro
Codeastro online Job Portal
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Codeastro Online Job Portal
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-01T15:23:04.625Z

Reserved: 2026-05-31T12:46:06.524Z

Link: CVE-2026-10261

cve-icon Vulnrichment

Updated: 2026-06-01T15:17:26.842Z

cve-icon NVD

Status : Deferred

Published: 2026-06-01T15:16:32.350

Modified: 2026-06-01T16:41:55.090

Link: CVE-2026-10261

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-01T16:30:06Z

Weaknesses